https://community.splunk.com/t5/Getting-Data-In/monitoring-splunk-server-s/m-p/23998#M3772 <P>Splunk released an App (apologies if you have heard of it), it's called S.o.S (Splunk on Splunk). </P> <P>Within this App, amongst a whole host of other useful things, there is a section on errors, and you can select errors from splunkd there. </P> <P>You can download it here... <A href="http://splunk-base.splunk.com/apps/29008/sos-splunk-on-splunk">http://splunk-base.splunk.com/apps/29008/sos-splunk-on-splunk</A></P> Tue, 29 Nov 2011 09:45:12 GMT MHibbin 2011-11-29T09:45:12Z https://community.splunk.com/t5/Getting-Data-In/monitoring-splunk-server-s/m-p/23997#M3771 <P>Hi,<BR /> I would like to know if there is a 'best practice' document around the topic of monitoring and alerting about a splunk server health.<BR /> What would be the recommendation to implement a monitor on "splunkd" ?<BR /> I have alerts in case a forwarder is sending less than expected, but how do I send alerts if splunkd has crashed?<BR /> I would like to know if there is a splunk solution for this kind of alerting, so I will not have to install another monitor (Nagios, BigBrother) to monitor splunk.</P> Tue, 29 Nov 2011 01:41:34 GMT https://community.splunk.com/t5/Getting-Data-In/monitoring-splunk-server-s/m-p/23997#M3771 mflamerich 2011-11-29T01:41:34Z https://community.splunk.com/t5/Getting-Data-In/monitoring-splunk-server-s/m-p/23998#M3772 <P>Splunk released an App (apologies if you have heard of it), it's called S.o.S (Splunk on Splunk). </P> <P>Within this App, amongst a whole host of other useful things, there is a section on errors, and you can select errors from splunkd there. </P> <P>You can download it here... <A href="http://splunk-base.splunk.com/apps/29008/sos-splunk-on-splunk">http://splunk-base.splunk.com/apps/29008/sos-splunk-on-splunk</A></P> Tue, 29 Nov 2011 09:45:12 GMT https://community.splunk.com/t5/Getting-Data-In/monitoring-splunk-server-s/m-p/23998#M3772 MHibbin 2011-11-29T09:45:12Z